14 Commits

Author SHA256 Message Date
3135d011d4 Accepting request 1299337 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/1299337
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat11?expand=0&rev=5
2025-08-14 11:19:04 +00:00
840ddc071f Accepting request 1288241 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/1288241
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat11?expand=0&rev=4
2025-06-24 18:50:20 +00:00
40f2d1761b - Update to Tomcat 11.0.8
* Fixed CVEs:
    + CVE-2025-46701: refactor CGI servlet to access resources via
      WebResources (bsc#1243815)
    + CVE-2025-48988: limits the total number of parts in a
      multi-part request and limits the size of
      the headers provided with each part (bsc#1244656)
    + CVE-2025-49125: Expand checks for webAppMount (bsc#1244649)
  * Catalina
    + Add: Support for the java:module namespace which mirrors the
      java:comp namespace.
    + Fix: 69690: Calling HttpServletRequest.getParameter() and related
      methods for a request with content type multipart/form-data when
      the mapped servlet does not have a @MultipartConfig or equivalent
      should not trigger an exception. Note that calling getPart() or
      getParts() is these circumstances will trigger an exception.
    + Add: Support parsing of multiple path parameters separated by ; in a
      single URL segment. Based on pull request #860 by Chenjp.
    + Fix: 69699: Encode redirect URL used by the rewrite valve with the
      session id if appropriate, and handle cross context with different
      session configuration when using rewrite.
    + Add: #863: Support for comments at the end of lines in text rewrite
      map files to align behaviour with Apache httpd. Pull request
      provided by Chenjp.
    + Fix: 69706: Saved request serialization issue in FORM introduced
      when allowing infinite session timeouts.
    + Fix: Expand the path checks for Pre-Resources and Post-Resources
      mounted at a path within the web application.
    + Fix: Process possible path parameters rewrite production in the
      rewrite valve.
    + Fix: 69588: Enable allowLinking to be set on PreResources,
      JarResources and PostResources. If not set explicitly, the setting
      will be inherited from the Resources.
    + Add: 69633: Support for Filters using context root mappings.
    + Fix: 69643: Optimize directory listing for large amount of files.
      Patch submitted by Loic de l'Eprevier.
    + Fix: #843: Off by one validation logic for partial PUT ranges and
      associated test case. Submitted by Chenjp.
    + Refactor: GCI servlet to access resources via the WebResource API.
    + Fix: 69662: Report name in exception message when a naming lookup
      failure occurs. Based on code submitted by Donald Smith.
    + Fix: Ensure that the FORM authentication attribute
      authenticationSessionTimeout works correctly when sessions have an
      infinite timeout when authentication starts.
    + Add: Provide a content type based on file extension when web
      application resources are accessed via a URL.
  * Coyote
    + Refactor: #861: TaskQueue to use the new interface RetryableQueue
      which enables better integration of custom Executors which provide
      their own BlockingQueue implementation. Pull request provided by
      Paulo Almeida.
    + Add: Finer grained control of multi-part request processing via two
      new attributes on the Connector element. maxPartCount limits the
      total number of parts in a multi-part request and maxPartHeaderSize
      limits the size of the headers provided with each part. Add support
      for these new attributes to the ParameterLimitValve.
  * Jasper
    + Fix: 69696: Mark the JSP wrapper for reload after a failed
      compilation.
    + Fix: 69635: Add support to jakarta.el.ImportHandler for resolving
      inner classes.
    + Add: #842: Support for optimized execution of c:set and c:remove
      tags, when activated via JSP servlet param
      useNonstandardTagOptimizations.
    + Fix: An edge case compilation bug for JSP and tag files on case
      insensitive file systems that was exposed by the test case for
      69635.
  * Web applications
    + Fix: 69694: Improve error reporting of deployment tasks done using
      the manager webapp when a copy operation fails.
    + Add: 68876: Documentation. Update the UML diagrams for server
      start-up, request processing and authentication using PlantUML and
      include the source files for each diagram.
  * Other
    + Add: Thread name to webappClassLoader.stackTraceRequestThread
      message. Patch provided by Felix Zhang.
    + Update: Tomcat Native to 2.0.9.
    + Update: The internal fork of Apache Commons FileUpload to 1.6.0-RC1
      (2025-06-05).
    + Update: EasyMock to 5.6.0.
    + Update: Checkstyle to 10.25.0.
    + Fix: Use the full path when the installer for Windows sets calls
      icacls.exe to set file permissions.
    + Update: Improvements to Japanese translations provided by tak7iji.
    + Update: Jacoco to 0.8.13.
    + Code: Explicitly set the locale to be used for Javadoc. For
      official releases, this locale will be English (US) to support
      reproducible builds.
    + Update: Byte Buddy to 1.17.5.
    + Update: Checkstyle to 10.23.1.
    + Update: File extension to media type mappings to align with the
      current list used by the Apache Web Server (httpd).
    + Update: Improvements to French translations.
    + Update: Improvements to Japanese translations provided by tak7iji.

OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=13
2025-06-24 12:02:11 +00:00
1f5fcfb27d Accepting request 1284492 from Java:packages
OBS-URL: https://build.opensuse.org/request/show/1284492
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat11?expand=0&rev=3
2025-06-11 14:23:25 +00:00
0dd9fa7ebf - Hardening permissions (bsc#1242722)
OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=11
2025-06-10 13:48:55 +00:00
d47ad60eae Accepting request 1276093 from Java:packages
cleanup

OBS-URL: https://build.opensuse.org/request/show/1276093
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat11?expand=0&rev=2
2025-05-09 16:51:25 +00:00
ebdc55818c OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=8 2025-05-09 07:31:11 +00:00
ffe9b43d2e OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=7 2025-05-09 07:26:06 +00:00
dd090516c8 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=6 2025-05-09 07:21:41 +00:00
371751c29f OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=5 2025-05-09 07:08:52 +00:00
a6bd98ace3 Accepting request 1274036 from Java:packages
Make conflicts and provides more generic

OBS-URL: https://build.opensuse.org/request/show/1274036
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomcat11?expand=0&rev=1
2025-05-05 20:25:00 +00:00
718f3a2bc4 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=3 2025-05-02 14:56:29 +00:00
d212c63a37 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=2 2025-04-28 10:22:38 +00:00
bf72d2d405 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat11?expand=0&rev=1 2025-04-24 04:32:40 +00:00
4 changed files with 0 additions and 38 deletions

BIN
apache-tomcat-11.0.6-src.tar.gz (Stored with Git LFS)

Binary file not shown.

View File

@@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEqcXfTSLpmZjZh1pREMAcWi9gWecFAmfr/o8ACgkQEMAcWi9g
WecdvxAA9qQwEx53mR0rlzpXAVc5ORdDmyC/rGY59oxyCsq22sWpLPRi5NBpohv7
xRqnnFJVi+YC8c1J+M4g+d1hJWRwC0S6auydofL2EbkKx3t6WbD+ku0syXfz+5ia
D4rOo55HZKEFXiMJexBLadC8VCTmKjT3Jng66/XLrAtlPHhcdyzaI+umbqTi2yNu
VoWVB6IDAxW6YoubouhHt35EXQTTYL8EqE6iLKsNgxHOula/Yj/L2lAgiiIU/aPV
gtJfP7WiR34Gdug/ppAdE0aatxkp+lANd5s1TPMGhmDvkI+n8tMpAeA91Q2cBoOT
KpVJvKnSID5xxiJVHRSNPgGUxR5s0USAEkLkJpKIgjwnEaIsJZwPJXepdSRaNURt
MP1/mYO9/5Fi93oUx+1RrJCmrTUlF4nA/zfSFOt49fovhU20l42zEHjFsNKVmqet
8eaBOwfjpiurr0vPklziJ3kdyV2AiiX+n9prNzAh5tZ3I9bripSWPYFG1gBw0Ln6
As3X5EjaQto1YkLOQ9oKNzzNVKoQ5wh/dfGxr4VY0FFuXBIWRiy5IFXEZH55ssGZ
7m5jqIDUmyQ+M+J+WvdVSHJfzGO9O8Ms9DIKrEoMV9gXcz9eMtFvbECFeCDFJQit
CD3T8rL5AlbDoU+GV111a94RMiUnvZUe2EtQockfMOHP1o/LhLk=
=+ON7
-----END PGP SIGNATURE-----

BIN
apache-tomcat-11.0.8-src.tar.gz (Stored with Git LFS)

Binary file not shown.

View File

@@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEqcXfTSLpmZjZh1pREMAcWi9gWecFAmhB4W8ACgkQEMAcWi9g
Wed9LRAAk7Z42oFegd844e7hKjv7+YUe/kBbl1QsMQvuo2pnotrZr2mbu/xjnj8D
JzrYYsN8o971yFGn/3VTfIv8TomH0ENpcm+Y8yHaVenPBE14Do+WpxpIwdRvj7w8
/E0+UFF88uCKoZCT9udy5TgdF89XklYMau9pTPqi5kB+AXlXUeLCi2lNlZ4A1Pmm
Zn+uk+zcBXj58VVZ3mquEqW+kopwM61rg2jJmYLQToDlZ5jHm1q2Mx27wGOjNTOx
aqu1+sfQlc/zMn/NvkURZ1GdJ25L2rWG1EPdKg0Fb1142L8zBpMiNSLYthupi9gA
QqRm8zWV1su6j2rLrmoL6GfdJnpt0vpY+MuyevuB/12pp1EWuprmjFTO3pLtvA5y
PkLeCbpaGXAW75ZZw0fJGzeXN6I24X0Uwsg+2TFxLUWOuR5W87ovayXnpf6SeU3k
OP3jq7ZeJD//5C+d4nhPTR+BMrlceIMWR9z8bVGkFaAcjIUvSZ9kwrmO7GGUQxUM
appmtbrmtRkTsHciaVpyfhcxOm6KcIbTbkZI4g3pwS0NUPIGHmgcQWE2RS4YxEHp
8PwP9dOnlC102Pf8B4d6u3JN3EgyB9BR9mw8Ge4xkCldHQeSuQEZuUIVzIM7ey7k
heWNDzFKad+J9SruayyQiJHXjyzpXfTLzNuY7e/lGgPUsY0OmVo=
=GwjZ
-----END PGP SIGNATURE-----